high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | May 2005 (3.93) |
| Protection available since | 4 April 2005 21:44:59 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Batten-A is a batch script Trojan that stops security-related services and modifies security-related registry entries. Troj/Batten-A is a batch script Trojan.
Troj/Batten-A attempts to stop a number of security-related services including some associated with Windows Critical Updates and the Windows Firewall.
Troj/Batten-A also drops a file to the Windows temp folder called 1.REG which it runs using REGEDIT in order to set a large number of security-related registry entries, including a number under HKLM\System\CurrentControlSet\Services\Tcpip\Parameters.
Troj/Batten-A attempts to delete the dropped file 1.REG and then itself.
|
